Security Architect

Advania UK; Manchester; On-site; GBP 90,000 - 120,000; Full time

Job summary

Advania UK is seeking a Security Architect to lead and evolve secure enterprise architectures across its Managed Services clients. You will shape identity, cloud, infrastructure and data protection domains, with a focus on Microsoft Entra ID, Defender, Sentinel, Purview, Azure and Microsoft 365.

You will provide strategic and technical leadership, govern HLDs/LLDs, drive security patterns, and ensure alignment with Zero Trust and Secure by Default principles across complex estates.

Qualifications

• Minimum 3–5 years of enterprise security, cloud architecture or cybersecurity roles.
• Strong understanding of Microsoft security technologies and governance.
• Experience delivering security architectures across hybrid, cloud and on‑prem environments.

Responsibilities

• Act as security architecture authority across Managed Services clients.
• Develop security strategies, roadmaps and target-state architectures.
• Lead design reviews and create HLDs/LLDs and reference architectures.
• Design identity architectures using Entra ID, AD, CA, PIM and SSO.
• Ensure Zero Trust, Secure by Design and Secure by Default principles.
• Engage with CIO/CTO/CISO and executive teams to present solutions.

Skills

Security architecture

Identity & access management

Microsoft Entra ID

Azure security

Defender/Sentinel/Purview

Zero Trust

Architecture governance

Executive stakeholder engagement

MS security products integration

Job description

• The Security Architect is a senior technical leadership role responsible for defining, governing and evolving secure enterprise architectures across Advania’s Managed Services client base
• The role provides strategic and technical leadership across identity, security, cloud, infrastructure, networking, data protection and operational security domains, with a particular focus on Microsoft technologies including Entra ID, Defender, Sentinel, Purview, Azure and Microsoft 365
• Security Architecture Leadership
• Act as the lead security architecture authority across assigned Managed Services clients
• Develop enterprise security strategies, roadmaps and target-state architectures
• Produce and govern High-Level Designs (HLDs), Low-Level Designs (LLDs) and reference architectures
• Ensure architectures align with Zero Trust, Security by Design and Secure by Default principles
• Conduct architecture reviews and design assurance activities
• Identity & Access Management Architecture
• Design and govern enterprise identity strategies across cloud, hybrid and on-premises environments
• Lead architecture for:
• Microsoft Entra ID
• Active Directory
• Identity Governance
• Privileged Identity Management (PIM)
• Conditional Access
• Authentication Services
• Federation
• Single Sign-On
• B2B/B2C identity models
• Define lifecycle management and access governance strategies
• Architect integrations between Microsoft identity services and third-party platforms. Managed Identities, Conditional Access, Identity Governance, Enterprise Applications and hybrid identity capabilities are core areas already recognised within Advania’s service offerings
• Microsoft Security Architecture
• Provide architectural ownership across the Microsoft security ecosystem, including:
• Microsoft Defender Suite
• Microsoft Sentinel
• Microsoft Purview
• Security Copilot
• Microsoft Intune
• Entra ID Security
• Azure Security Services
• Microsoft 365 Security & Compliance
• Develop security patterns and reference architectures for:
• Threat protection
• Identity protection
• Data protection
• Insider risk management
• Security monitoring
• Compliance
• AI security
• These technologies are explicitly identified as core security architecture domains within Advania’s security architecture practice
• Infrastructure & Platform Integration
• Design secure architectures spanning:
• Azure
• AWS
• Google Cloud
• On-premises infrastructure
• SaaS platforms
• Datacentre environments
• Lead secure integration of:
• Third-party security products
• Network infrastructure
• Business applications
• Identity providers
• Security operations tooling
• Assess technical dependencies and integration risks across complex customer estates
• Managed Services Enablement
• Support the onboarding of customer environments into managed services
• Ensure new solutions are operationally supportable
• Define service acceptance criteria and operational design requirements
• Work alongside SOC, Managed Identity, Azure and Infrastructure teams to establish support models
• Provide technical governance throughout the service lifecycle
• Client Advisory & Strategic Engagement
• Act as trusted advisor to CIO, CTO, CISO and technology leadership teams
• Facilitate architecture workshops and strategy sessions
• Develop security strategies, maturity roadmaps and investment plans
• Present architecture solutions and recommendations to executive and board-level stakeholders
• Support client security assessments, audits and transformation programmes
• Service Development
• Support the creation and evolution of Managed Security Services
• Define architecture standards, reusable patterns and technical frameworks
• Evaluate emerging technologies and services
• Drive innovation across identity, cloud security, AI security and automation
• What Success Looks Like
• Structural review of 10 clients, understand posture, contract, roadmaps and major risks
• Develop reusable patterns covering Entra ID, Purview, and Defender for Cloud
• Support at least 5 qualified opportunities
• Trusted architecture authority across assigned clients
• Infrastructure Integration
• Cloud based PKI
• Executive stakeholder management
• Microsoft Sentinel
• AZ-305 Azure Solutions Architect
• GDPR Risk Management
• Microsoft Entra ID
• Multi-cloud security architecture
• Client Engagement
• PIM SC-100 Cybersecurity Architect Expert
• MFA
• Minimum 3-5 years’ experience in enterprise security, cloud architecture or cyber security roles
• Strong understanding of: Increased adoption of Microsoft security technologies AI security and governance Networking DORA Deep expertise in: Threat Modelling Security Engineering Identity Governance Microsoft Intune Cloud Security Reusable architecture standards and patterns established across the business Directory Services Regulatory environments including: Positive client satisfaction and stakeholder feedback SSO Infrastructure Cyber Essentials Microsoft Federation Managed Services environment Microsoft Defender Suite Growth of architecture-led consultancy and managed service opportunities Extensive client-facing consultancy experience Azure Security Success Measures Architecture workshop facilitation Identity & Access Management Authentication Security architectures successfully deployed into operational managed services ISO 27001 Security Governance Azure Landing Zones SC-200 Security Operations Analyst Hybrid Identity Advanced experience across: Microsoft Purview Desirable Experience Exposure Management and Vulnerability Management platforms API Security NIST CSF Secure DevOps / DevSecOps Security Operations integration Microsoft 365 Security & Compliance FCA / PRA Security Monitoring Improved client security maturity and resilience Microsoft Expertise AZ-500 Azure Security Engineer SC-300 Identity & Access Administrator Secure Architecture Frameworks Demonstrable experience operating as a Security Architect, Enterprise Architect or Principal Consultant Technical leadership across multiple concurrent clients NIS2 Data Protection Hybrid Infrastructure Zero Trust Architecture CISSP Certifications CCSP CISMS ABSA Practitioner